duritong/puppet-shorewall — pull request #3 by xstasi (2013-02-27 11:03:36+00:00)
Title: Let augeas{'shorewall_module_config_path'} depend on Shorewall being installed

The resource augeas{'shorewall_module_config_path'} fails when shorewall is not installed on manifest application, so you need to run puppet twice to configure it.

Making the resource depend on Package[shorewall] fixes the problem.